Overview

overview

10

Static

static

10

ef4a72a059...18.exe

windows7-x64

10

ef4a72a059...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef4a72a05964e44be244e4619e3eed47_JaffaCakes118

  • Size

    2.7MB

  • Sample

    240921-hxn1yszhkp

  • MD5

    ef4a72a05964e44be244e4619e3eed47

  • SHA1

    8b0463b635c9cfc2d88300f8c9872b6a931675b1

  • SHA256

    6ab2ffbb7aba2d4b2db3e9278cc8bdba460c9e46baa2f4adc2f004bf85df71a1

  • SHA512

    f176ae5bbdb9dcc189225adb12ccc353082a2400526817e40c7c63c0b53e106cd75b90eac7c04db6870b416dbf79a348b8682f027708a0ed61084e891ae525a1

  • SSDEEP

    49152:l9TMmPonATjhuIYJ3erpCX2e41YrVioUaNFYzO5tfDZX2IicWNa8B7tybRhHNmzw:l9TMmwnGhuI0e4XT41Yra2FY+XX2Iicz

Score
10/10
modiloaderdiscoverytrojan

Malware Config

Targets

    • Target

      ef4a72a05964e44be244e4619e3eed47_JaffaCakes118

    • Size

      2.7MB

    • MD5

      ef4a72a05964e44be244e4619e3eed47

    • SHA1

      8b0463b635c9cfc2d88300f8c9872b6a931675b1

    • SHA256

      6ab2ffbb7aba2d4b2db3e9278cc8bdba460c9e46baa2f4adc2f004bf85df71a1

    • SHA512

      f176ae5bbdb9dcc189225adb12ccc353082a2400526817e40c7c63c0b53e106cd75b90eac7c04db6870b416dbf79a348b8682f027708a0ed61084e891ae525a1

    • SSDEEP

      49152:l9TMmPonATjhuIYJ3erpCX2e41YrVioUaNFYzO5tfDZX2IicWNa8B7tybRhHNmzw:l9TMmwnGhuI0e4XT41Yra2FY+XX2Iicz

    Score
    10/10
    modiloaderdiscoverytrojan

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

      trojanmodiloader

    • ModiLoader Second Stage

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks